CVE-2026-9320

creationtimestamp| type| source ---|---|--- 2026-06-16 13:55:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mofx75zkbe24 2026-06-16 14:05:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mofxqzhmmb2p...

CVE-2026-9071

creationtimestamp| type| source ---|---|--- 2026-06-16 13:55:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mofx75zkbe24 2026-06-16 14:05:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mofxqzhmmb2p...

CVE-2026-49772

creationtimestamp| type| source ---|---|--- 2026-06-16 13:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofu6j6ze72f 2026-06-16 13:37:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofw7xjz7z2v 2026-07-13 22:00:21+00:00| seen|...

BIT-DISCOURSE-2026-44783 Discourse: Replying to a whisper lets non-whisperers create staff-only whisper posts

Discourse is an open-source discussion platform. From versions 2026.1.0 to before 2026.1.4, 2026.3.0 to before 2026.3.1, and 2026.4.0 to before 2026.4.1, a flaw in how replies to whisper posts are handled allows authenticated users outside the groups configured in whispersallowedgroups to post in...

CVE-2026-10829

creationtimestamp| type| source ---|---|--- 2026-06-16 12:15:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmfzfxl2w 2026-06-16 13:28:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofvpcucfu2h 2026-06-17 10:39:36+00:00| seen|...

CVE-2026-5416

creationtimestamp| type| source ---|---|--- 2026-06-16 08:18:30+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mofeee5snmy2 2026-06-16 11:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofnhp7x6t2n 2026-06-16 13:42:38+00:00| seen|...

CVE-2026-6933

creationtimestamp| type| source ---|---|--- 2026-06-16 07:00:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mof7z2bjzc2n 2026-06-16 09:23:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofhyli5x32c 2026-06-16 12:05:58+00:00| seen|...

CVE-2026-10780

The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the staticblockcontent shortcode handler retrieving a post via getpost using an attacker-supplied 'id' attribute and outputting its postcontent without...

CVE-2026-11317

creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-03 2026-06-16 16:01:43+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mog6bmgo4o2o 2026-06-16 17:48:09+00:00| seen|...

CVE-2026-0647

creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-05 2026-06-16 16:12:33+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mog6uxnajr2d 2026-06-16 17:31:41+00:00| seen|...

CVE-2026-10780

CVE-2026-10780 affects the WordPress Static Block plugin (versions up to 2.2). The vulnerability is an Insecure Direct Object Reference in the static_block_content() shortcode handler, which retrieves a post with get_post() using an attacker-controlled id and outputs its post_content without vali...

CVE-2026-10780 Static Block <= 2.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode 'id' Attribute

The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the staticblockcontent shortcode handler retrieving a post via getpost using an attacker-supplied 'id' attribute and outputting its postcontent without...

CVE-2026-48853

creationtimestamp| type| source ---|---|--- 2026-06-16 00:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moeikz22zn2e 2026-06-16 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116756842721787890 2026-06-16 00:23:17+00:00| seen|...

PT-2026-49611

Name of the Vulnerable Software and Affected Versions Static Block versions prior to 2.3 Description The Static Block plugin for WordPress contains an Insecure Direct Object Reference. This occurs because the static block content shortcode handler uses the get post function to retrieve a post bas...

CVE-2026-52700

creationtimestamp| type| source ---|---|--- 2026-06-15 22:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moebwj2hkn26 2026-06-15 22:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebymanjo2b...

CVE-2026-49778

creationtimestamp| type| source ---|---|--- 2026-06-15 19:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3modyoehafq2d 2026-06-15 19:27:41+00:00| seen| https://bsky.app/profile/potato.software/post/3modzcxu4oj2p...

CVE-2026-49109

creationtimestamp| type| source ---|---|--- 2026-06-15 09:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocx5icftn2d 2026-06-15 10:01:19+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3moczoaj4gf2h 2026-06-15 10:34:18+00:00| seen|...

CVE-2026-12218

creationtimestamp| type| source ---|---|--- 2026-06-15 07:01:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116752835857280454 2026-06-15 07:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocsjjd7el2p 2026-06-15 07:59:57+00:00| seen|...

CVE-2026-12220

creationtimestamp| type| source ---|---|--- 2026-06-15 07:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocpkfa5of2w 2026-06-15 08:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moctguavyj2e...

CVE-2026-12214

creationtimestamp| type| source ---|---|--- 2026-06-15 05:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocitrj45z2v 2026-06-15 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mocm7jz4ix2a 2026-06-15 06:00:33+00:00| seen|...